API tools faq
paste
paladin316

Exes_f2ac3bcb1b1168447c9a61d79b223186_exe_2019-07-24_03_30.txt

paladin316
Jul 24th, 2019
2,353
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 60.79 KB | None | 0 0
raw download clone embed print report
  1.  
  2. * MalFamily: "Fuerboos"
  3.  
  4. * MalScore: 10.0
  5.  
  6. * File Name: "Exes_f2ac3bcb1b1168447c9a61d79b223186.exe"
  7. * File Size: 9286144
  8. * File Type: "PE32 executable (console) Intel 80386, for MS Windows"
  9. * SHA256: "59fca7bc8f8686386c747a87a7ce0e1a66345bf43d7b14af6d842aca263f7063"
  10. * MD5: "f2ac3bcb1b1168447c9a61d79b223186"
  11. * SHA1: "80bdec0c81e8c71d8d60553bbd6c28bdc543e96f"
  12. * SHA512: "589fcb3f6bd9022a809778aa24a25494ba65a188a25dacde9f104917d742e1500d5b243c928e2da9fe43685f153026a1ef247709ab8f753afe30c27f9944c131"
  13. * CRC32: "1F696B6D"
  14. * SSDEEP: "196608:hNqivhoY7y27jvP8m8R8JMibwYQJB2PON8mU0odPO99p/GvWrV:75ZH7YR8dMz2PmO2NOerV"
  15.  
  16. * Process Execution:
  17. "Exes_f2ac3bcb1b1168447c9a61d79b223186.exe",
  18. "cmd.exe",
  19. "program2.exe",
  20. "cmd.exe",
  21. "BasicBot.exe",
  22. "BasicBot.exe"
  23.  
  24.  
  25. * Executed Commands:
  26. "\"C:\\Windows\\sysnative\\cmd\" /c \"C:\\Users\\user\\AppData\\Local\\Temp\\64F5.tmp\\6505.tmp\\6506.bat C:\\Users\\user\\AppData\\Local\\Temp\\Exes_f2ac3bcb1b1168447c9a61d79b223186.exe\"",
  27. "C:\\Users\\user\\AppData\\Roaming\\program2.exe",
  28. "C:\\Users\\user\\AppData\\Roaming\\BasicBot.exe",
  29. "\"C:\\Windows\\sysnative\\cmd\" /c \"C:\\Users\\user\\AppData\\Local\\Temp\\6737.tmp\\6747.tmp\\6748.bat C:\\Users\\user\\AppData\\Roaming\\program2.exe\""
  30.  
  31.  
  32. * Signatures Detected:
  33.  
  34. "Description": "Attempts to connect to a dead IP:Port (3 unique times)",
  35. "Details":
  36.  
  37. "IP": "127.0.0.1:49179"
  38.  
  39.  
  40. "IP": "162.159.135.233:443"
  41.  
  42.  
  43. "IP": "162.159.136.234:443"
  44.  
  45.  
  46.  
  47.  
  48. "Description": "Creates RWX memory",
  49. "Details":
  50.  
  51.  
  52. "Description": "Starts servers listening on 127.0.0.1:0",
  53. "Details":
  54.  
  55.  
  56. "Description": "Reads data out of its own binary image",
  57. "Details":
  58.  
  59. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x00000000, length: 0x00001000"
  60.  
  61.  
  62. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x0003fe63, length: 0x00001000"
  63.  
  64.  
  65. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x00040047, length: 0x0000c000"
  66.  
  67.  
  68. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x0004b934, length: 0x00007000"
  69.  
  70.  
  71. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x00051a33, length: 0x0000a000"
  72.  
  73.  
  74. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x0005ae79, length: 0x00003000"
  75.  
  76.  
  77. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x0005d953, length: 0x0000d000"
  78.  
  79.  
  80. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x00069be9, length: 0x00018000"
  81.  
  82.  
  83. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x00080fe4, length: 0x00005000"
  84.  
  85.  
  86. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x00085145, length: 0x00015000"
  87.  
  88.  
  89. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x00099701, length: 0x00004000"
  90.  
  91.  
  92. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x0009cd58, length: 0x00005000"
  93.  
  94.  
  95. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000a1366, length: 0x00004000"
  96.  
  97.  
  98. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000a481c, length: 0x00008000"
  99.  
  100.  
  101. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000ac173, length: 0x0000c000"
  102.  
  103.  
  104. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000b77ac, length: 0x00006000"
  105.  
  106.  
  107. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000bce18, length: 0x00005000"
  108.  
  109.  
  110. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000c12d7, length: 0x00015000"
  111.  
  112.  
  113. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000d54bd, length: 0x00004000"
  114.  
  115.  
  116. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000d9298, length: 0x00003000"
  117.  
  118.  
  119. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000dbe25, length: 0x00001000"
  120.  
  121.  
  122. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000dc208, length: 0x00001000"
  123.  
  124.  
  125. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000dc54b, length: 0x00001000"
  126.  
  127.  
  128. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000dc89a, length: 0x00001000"
  129.  
  130.  
  131. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000dcc1a, length: 0x00001000"
  132.  
  133.  
  134. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000dd273, length: 0x00001000"
  135.  
  136.  
  137. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000dd8ec, length: 0x00001000"
  138.  
  139.  
  140. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000ddcc2, length: 0x00001000"
  141.  
  142.  
  143. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000de01d, length: 0x00001000"
  144.  
  145.  
  146. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000de404, length: 0x00001000"
  147.  
  148.  
  149. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000de7de, length: 0x00001000"
  150.  
  151.  
  152. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000dec7e, length: 0x00001000"
  153.  
  154.  
  155. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000df251, length: 0x00001000"
  156.  
  157.  
  158. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000df63f, length: 0x00001000"
  159.  
  160.  
  161. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000dfa18, length: 0x00001000"
  162.  
  163.  
  164. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000dfe51, length: 0x00001000"
  165.  
  166.  
  167. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e03dd, length: 0x00001000"
  168.  
  169.  
  170. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e0a24, length: 0x00001000"
  171.  
  172.  
  173. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e0d65, length: 0x00001000"
  174.  
  175.  
  176. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e10cb, length: 0x00001000"
  177.  
  178.  
  179. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e145c, length: 0x00001000"
  180.  
  181.  
  182. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e1961, length: 0x00001000"
  183.  
  184.  
  185. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e1f31, length: 0x00001000"
  186.  
  187.  
  188. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e23bf, length: 0x00001000"
  189.  
  190.  
  191. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e2793, length: 0x00001000"
  192.  
  193.  
  194. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e2ade, length: 0x00002000"
  195.  
  196.  
  197. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e44aa, length: 0x00002000"
  198.  
  199.  
  200. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e6296, length: 0x00002000"
  201.  
  202.  
  203. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e7bb7, length: 0x00002000"
  204.  
  205.  
  206. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000e974c, length: 0x00002000"
  207.  
  208.  
  209. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000eb0ff, length: 0x00002000"
  210.  
  211.  
  212. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000eca8a, length: 0x00003000"
  213.  
  214.  
  215. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000ef113, length: 0x00002000"
  216.  
  217.  
  218. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000f0afa, length: 0x00002000"
  219.  
  220.  
  221. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000f29ca, length: 0x00003000"
  222.  
  223.  
  224. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000f4a1d, length: 0x00003000"
  225.  
  226.  
  227. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000f6b1b, length: 0x00002000"
  228.  
  229.  
  230. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000f8709, length: 0x00002000"
  231.  
  232.  
  233. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x000fa0bc, length: 0x000b9000"
  234.  
  235.  
  236. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x001b2cea, length: 0x00027000"
  237.  
  238.  
  239. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x001d93f3, length: 0x00009000"
  240.  
  241.  
  242. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x001e1e46, length: 0x00012000"
  243.  
  244.  
  245. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x001f3dea, length: 0x0017a000"
  246.  
  247.  
  248. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x0036d4e1, length: 0x00004000"
  249.  
  250.  
  251. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x0037078b, length: 0x00068000"
  252.  
  253.  
  254. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x003d86b1, length: 0x0005f000"
  255.  
  256.  
  257. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x00437054, length: 0x00002000"
  258.  
  259.  
  260. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x004381dd, length: 0x00035000"
  261.  
  262.  
  263. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x0046c966, length: 0x00026000"
  264.  
  265.  
  266. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x0070466c, length: 0x000010e8"
  267.  
  268.  
  269. "self_read": "process: BasicBot.exe, pid: 432, offset: 0x007056f4, length: 0x00000060"
  270.  
  271.  
  272. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00000000, length: 0x00001000"
  273.  
  274.  
  275. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0003ba00, length: 0x00001000"
  276.  
  277.  
  278. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0003bb1a, length: 0x00001000"
  279.  
  280.  
  281. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0003bf85, length: 0x00002000"
  282.  
  283.  
  284. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0003d0b1, length: 0x00002000"
  285.  
  286.  
  287. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0003edbe, length: 0x00001000"
  288.  
  289.  
  290. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0003f505, length: 0x00001000"
  291.  
  292.  
  293. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0003f936, length: 0x00001000"
  294.  
  295.  
  296. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0003fa3d, length: 0x00001000"
  297.  
  298.  
  299. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004919ce, length: 0x00002000"
  300.  
  301.  
  302. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004919df, length: 0x00002000"
  303.  
  304.  
  305. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00492131, length: 0x00002000"
  306.  
  307.  
  308. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00492b88, length: 0x00002000"
  309.  
  310.  
  311. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004a361d, length: 0x00002000"
  312.  
  313.  
  314. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004a3cab, length: 0x00002000"
  315.  
  316.  
  317. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004a49ac, length: 0x00002000"
  318.  
  319.  
  320. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004a4e7e, length: 0x00004000"
  321.  
  322.  
  323. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004a7b1c, length: 0x00002000"
  324.  
  325.  
  326. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004a8907, length: 0x00002000"
  327.  
  328.  
  329. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004a941a, length: 0x00004000"
  330.  
  331.  
  332. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004ac5bb, length: 0x00002000"
  333.  
  334.  
  335. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004ad4d3, length: 0x00004000"
  336.  
  337.  
  338. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004b05f6, length: 0x00002000"
  339.  
  340.  
  341. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004b181a, length: 0x00002000"
  342.  
  343.  
  344. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004b2166, length: 0x00002000"
  345.  
  346.  
  347. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004b25b9, length: 0x00002000"
  348.  
  349.  
  350. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004b2c7b, length: 0x00004000"
  351.  
  352.  
  353. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004b55fb, length: 0x00002000"
  354.  
  355.  
  356. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004b58dd, length: 0x00002000"
  357.  
  358.  
  359. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004b5faa, length: 0x00002000"
  360.  
  361.  
  362. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004b7ce2, length: 0x00002000"
  363.  
  364.  
  365. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004b9944, length: 0x00002000"
  366.  
  367.  
  368. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004ba324, length: 0x00002000"
  369.  
  370.  
  371. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004ba6e3, length: 0x00002000"
  372.  
  373.  
  374. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004ba7d1, length: 0x00004000"
  375.  
  376.  
  377. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004bd44e, length: 0x00002000"
  378.  
  379.  
  380. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004bea96, length: 0x00002000"
  381.  
  382.  
  383. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004bf07e, length: 0x00002000"
  384.  
  385.  
  386. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004bf7c4, length: 0x00002000"
  387.  
  388.  
  389. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004bfac4, length: 0x00002000"
  390.  
  391.  
  392. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004c1721, length: 0x00002000"
  393.  
  394.  
  395. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004c1a72, length: 0x00002000"
  396.  
  397.  
  398. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004c27cf, length: 0x00002000"
  399.  
  400.  
  401. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004d6561, length: 0x00002000"
  402.  
  403.  
  404. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004de6cb, length: 0x00002000"
  405.  
  406.  
  407. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004ded76, length: 0x00002000"
  408.  
  409.  
  410. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004def11, length: 0x00006000"
  411.  
  412.  
  413. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004e3eee, length: 0x00002000"
  414.  
  415.  
  416. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004e4392, length: 0x00002000"
  417.  
  418.  
  419. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004e5272, length: 0x00002000"
  420.  
  421.  
  422. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004e56cb, length: 0x00002000"
  423.  
  424.  
  425. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004e5856, length: 0x00002000"
  426.  
  427.  
  428. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004e6490, length: 0x00004000"
  429.  
  430.  
  431. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004e87c5, length: 0x00002000"
  432.  
  433.  
  434. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004e8cea, length: 0x00002000"
  435.  
  436.  
  437. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004e9f27, length: 0x00002000"
  438.  
  439.  
  440. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004eb612, length: 0x00002000"
  441.  
  442.  
  443. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004eb6b4, length: 0x00002000"
  444.  
  445.  
  446. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004ed648, length: 0x00002000"
  447.  
  448.  
  449. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004ee251, length: 0x00002000"
  450.  
  451.  
  452. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004eefd6, length: 0x00002000"
  453.  
  454.  
  455. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004ef3f3, length: 0x00004000"
  456.  
  457.  
  458. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004f2074, length: 0x00004000"
  459.  
  460.  
  461. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004f4310, length: 0x00002000"
  462.  
  463.  
  464. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004f6235, length: 0x00002000"
  465.  
  466.  
  467. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004f6dd3, length: 0x00004000"
  468.  
  469.  
  470. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004f93d2, length: 0x00002000"
  471.  
  472.  
  473. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004fd696, length: 0x00004000"
  474.  
  475.  
  476. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x004ffb35, length: 0x00002000"
  477.  
  478.  
  479. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005004cb, length: 0x00002000"
  480.  
  481.  
  482. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00500838, length: 0x00002000"
  483.  
  484.  
  485. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00500fe5, length: 0x00002000"
  486.  
  487.  
  488. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0050118c, length: 0x00002000"
  489.  
  490.  
  491. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00501d20, length: 0x00006000"
  492.  
  493.  
  494. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00506e03, length: 0x00002000"
  495.  
  496.  
  497. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0050723d, length: 0x00002000"
  498.  
  499.  
  500. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005075c1, length: 0x00002000"
  501.  
  502.  
  503. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00507911, length: 0x00002000"
  504.  
  505.  
  506. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00508580, length: 0x00002000"
  507.  
  508.  
  509. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0050c92d, length: 0x00002000"
  510.  
  511.  
  512. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0050cc94, length: 0x00002000"
  513.  
  514.  
  515. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0050df39, length: 0x00004000"
  516.  
  517.  
  518. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0051081f, length: 0x00004000"
  519.  
  520.  
  521. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00513640, length: 0x00002000"
  522.  
  523.  
  524. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0051383c, length: 0x00004000"
  525.  
  526.  
  527. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00516b2a, length: 0x00002000"
  528.  
  529.  
  530. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00516d7d, length: 0x00002000"
  531.  
  532.  
  533. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005175d4, length: 0x00002000"
  534.  
  535.  
  536. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00517a57, length: 0x00002000"
  537.  
  538.  
  539. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005180dc, length: 0x00002000"
  540.  
  541.  
  542. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005185dc, length: 0x00002000"
  543.  
  544.  
  545. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005186be, length: 0x00002000"
  546.  
  547.  
  548. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0051891a, length: 0x00002000"
  549.  
  550.  
  551. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00518d9d, length: 0x00002000"
  552.  
  553.  
  554. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00519304, length: 0x00002000"
  555.  
  556.  
  557. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00519601, length: 0x00002000"
  558.  
  559.  
  560. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00519b01, length: 0x00002000"
  561.  
  562.  
  563. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0051b01a, length: 0x00002000"
  564.  
  565.  
  566. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0051b274, length: 0x00004000"
  567.  
  568.  
  569. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0051e52c, length: 0x00002000"
  570.  
  571.  
  572. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0051e788, length: 0x00004000"
  573.  
  574.  
  575. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00520bd5, length: 0x00002000"
  576.  
  577.  
  578. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00520e2c, length: 0x00002000"
  579.  
  580.  
  581. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00521406, length: 0x00004000"
  582.  
  583.  
  584. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00523b29, length: 0x00002000"
  585.  
  586.  
  587. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00524fcf, length: 0x00002000"
  588.  
  589.  
  590. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005259e2, length: 0x00002000"
  591.  
  592.  
  593. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00526540, length: 0x00002000"
  594.  
  595.  
  596. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00526d88, length: 0x00002000"
  597.  
  598.  
  599. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005274d6, length: 0x00002000"
  600.  
  601.  
  602. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00527d2e, length: 0x00002000"
  603.  
  604.  
  605. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005285d3, length: 0x00002000"
  606.  
  607.  
  608. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00528a86, length: 0x00002000"
  609.  
  610.  
  611. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00528f14, length: 0x00002000"
  612.  
  613.  
  614. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0052917d, length: 0x00002000"
  615.  
  616.  
  617. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00529755, length: 0x00002000"
  618.  
  619.  
  620. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00529d93, length: 0x00002000"
  621.  
  622.  
  623. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0052a0e1, length: 0x00002000"
  624.  
  625.  
  626. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0052a5f6, length: 0x00002000"
  627.  
  628.  
  629. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0052b1d8, length: 0x00002000"
  630.  
  631.  
  632. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0052b606, length: 0x00002000"
  633.  
  634.  
  635. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0052e9b1, length: 0x00002000"
  636.  
  637.  
  638. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0052f04c, length: 0x00002000"
  639.  
  640.  
  641. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0052f096, length: 0x00002000"
  642.  
  643.  
  644. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0052f31c, length: 0x00002000"
  645.  
  646.  
  647. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00533085, length: 0x00002000"
  648.  
  649.  
  650. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00533acc, length: 0x00002000"
  651.  
  652.  
  653. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005354ce, length: 0x00002000"
  654.  
  655.  
  656. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0053556b, length: 0x00002000"
  657.  
  658.  
  659. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00536376, length: 0x00002000"
  660.  
  661.  
  662. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0053911b, length: 0x00002000"
  663.  
  664.  
  665. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0053a606, length: 0x00002000"
  666.  
  667.  
  668. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0053b6aa, length: 0x00006000"
  669.  
  670.  
  671. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00546332, length: 0x00002000"
  672.  
  673.  
  674. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00547fec, length: 0x00002000"
  675.  
  676.  
  677. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005485c7, length: 0x00004000"
  678.  
  679.  
  680. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0054b415, length: 0x00002000"
  681.  
  682.  
  683. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0054ccf6, length: 0x00002000"
  684.  
  685.  
  686. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0054d386, length: 0x00002000"
  687.  
  688.  
  689. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0054e05d, length: 0x00002000"
  690.  
  691.  
  692. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0054f4bd, length: 0x00002000"
  693.  
  694.  
  695. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0054fc03, length: 0x00002000"
  696.  
  697.  
  698. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00550723, length: 0x00004000"
  699.  
  700.  
  701. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005534fc, length: 0x00004000"
  702.  
  703.  
  704. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00557204, length: 0x00002000"
  705.  
  706.  
  707. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00557ddd, length: 0x00002000"
  708.  
  709.  
  710. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00558415, length: 0x00002000"
  711.  
  712.  
  713. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00559ade, length: 0x00002000"
  714.  
  715.  
  716. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0055abc9, length: 0x00002000"
  717.  
  718.  
  719. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0055c0b0, length: 0x00002000"
  720.  
  721.  
  722. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0055cc97, length: 0x00002000"
  723.  
  724.  
  725. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0055cccb, length: 0x00002000"
  726.  
  727.  
  728. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0055ce5c, length: 0x00002000"
  729.  
  730.  
  731. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0055d1c5, length: 0x00004000"
  732.  
  733.  
  734. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0055ff39, length: 0x00002000"
  735.  
  736.  
  737. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0056157a, length: 0x00002000"
  738.  
  739.  
  740. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005626a3, length: 0x00002000"
  741.  
  742.  
  743. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005641a7, length: 0x00002000"
  744.  
  745.  
  746. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00564bcb, length: 0x00006000"
  747.  
  748.  
  749. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005690ba, length: 0x00002000"
  750.  
  751.  
  752. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0056a868, length: 0x00004000"
  753.  
  754.  
  755. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0056df9b, length: 0x00002000"
  756.  
  757.  
  758. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0056e931, length: 0x00002000"
  759.  
  760.  
  761. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0056f0cb, length: 0x00004000"
  762.  
  763.  
  764. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005717d6, length: 0x00006000"
  765.  
  766.  
  767. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005764dd, length: 0x00004000"
  768.  
  769.  
  770. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0057913d, length: 0x00002000"
  771.  
  772.  
  773. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0057a2a9, length: 0x00002000"
  774.  
  775.  
  776. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0057bd72, length: 0x00004000"
  777.  
  778.  
  779. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0057dee4, length: 0x00004000"
  780.  
  781.  
  782. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00580f53, length: 0x00002000"
  783.  
  784.  
  785. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005813cc, length: 0x00002000"
  786.  
  787.  
  788. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00581a10, length: 0x00002000"
  789.  
  790.  
  791. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00582b5b, length: 0x00002000"
  792.  
  793.  
  794. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005846d3, length: 0x00002000"
  795.  
  796.  
  797. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00585bdf, length: 0x00002000"
  798.  
  799.  
  800. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00586529, length: 0x00002000"
  801.  
  802.  
  803. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0058704f, length: 0x00002000"
  804.  
  805.  
  806. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0058764c, length: 0x00002000"
  807.  
  808.  
  809. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005885e6, length: 0x00002000"
  810.  
  811.  
  812. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00589f35, length: 0x00004000"
  813.  
  814.  
  815. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0058d1c8, length: 0x00004000"
  816.  
  817.  
  818. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0058f7b8, length: 0x00002000"
  819.  
  820.  
  821. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005916e8, length: 0x00002000"
  822.  
  823.  
  824. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00593003, length: 0x00004000"
  825.  
  826.  
  827. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0059554f, length: 0x00002000"
  828.  
  829.  
  830. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0059d415, length: 0x00002000"
  831.  
  832.  
  833. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0059d695, length: 0x00002000"
  834.  
  835.  
  836. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005a4a67, length: 0x00002000"
  837.  
  838.  
  839. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005a611e, length: 0x00002000"
  840.  
  841.  
  842. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005a77f3, length: 0x00002000"
  843.  
  844.  
  845. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005a7ee7, length: 0x00002000"
  846.  
  847.  
  848. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005a9f97, length: 0x00002000"
  849.  
  850.  
  851. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005aa2c6, length: 0x00002000"
  852.  
  853.  
  854. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005aaae2, length: 0x00002000"
  855.  
  856.  
  857. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005ad571, length: 0x00002000"
  858.  
  859.  
  860. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005b12d9, length: 0x00002000"
  861.  
  862.  
  863. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005b1738, length: 0x00004000"
  864.  
  865.  
  866. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005b5063, length: 0x00002000"
  867.  
  868.  
  869. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005b6779, length: 0x00002000"
  870.  
  871.  
  872. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005b761e, length: 0x00002000"
  873.  
  874.  
  875. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005b8a2b, length: 0x00002000"
  876.  
  877.  
  878. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005bc13d, length: 0x00002000"
  879.  
  880.  
  881. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005c1d78, length: 0x00002000"
  882.  
  883.  
  884. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005c35bc, length: 0x00002000"
  885.  
  886.  
  887. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005c3d61, length: 0x00006000"
  888.  
  889.  
  890. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005c8b09, length: 0x00002000"
  891.  
  892.  
  893. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005c9755, length: 0x00004000"
  894.  
  895.  
  896. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005d2ba1, length: 0x00002000"
  897.  
  898.  
  899. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005d46ca, length: 0x00004000"
  900.  
  901.  
  902. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005d84f8, length: 0x00002000"
  903.  
  904.  
  905. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005d858a, length: 0x00002000"
  906.  
  907.  
  908. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005d96ed, length: 0x00002000"
  909.  
  910.  
  911. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005db3a7, length: 0x00002000"
  912.  
  913.  
  914. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005db7a5, length: 0x00002000"
  915.  
  916.  
  917. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005db80e, length: 0x0000a000"
  918.  
  919.  
  920. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005e46b0, length: 0x00002000"
  921.  
  922.  
  923. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005ec251, length: 0x00002000"
  924.  
  925.  
  926. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005ed4d9, length: 0x00002000"
  927.  
  928.  
  929. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005ed70c, length: 0x00002000"
  930.  
  931.  
  932. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005ee7a5, length: 0x0000a000"
  933.  
  934.  
  935. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005f68a1, length: 0x00006000"
  936.  
  937.  
  938. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005fb3d2, length: 0x00002000"
  939.  
  940.  
  941. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005fc438, length: 0x00002000"
  942.  
  943.  
  944. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005fd5f0, length: 0x00002000"
  945.  
  946.  
  947. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005fe998, length: 0x00002000"
  948.  
  949.  
  950. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x005fee3c, length: 0x00006000"
  951.  
  952.  
  953. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006047a4, length: 0x00002000"
  954.  
  955.  
  956. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00605b81, length: 0x00002000"
  957.  
  958.  
  959. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00607387, length: 0x00002000"
  960.  
  961.  
  962. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00607592, length: 0x00002000"
  963.  
  964.  
  965. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00607858, length: 0x00002000"
  966.  
  967.  
  968. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00607962, length: 0x00002000"
  969.  
  970.  
  971. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00609091, length: 0x00002000"
  972.  
  973.  
  974. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0060be2b, length: 0x00002000"
  975.  
  976.  
  977. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00616625, length: 0x00002000"
  978.  
  979.  
  980. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00616ccc, length: 0x00002000"
  981.  
  982.  
  983. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00618ef3, length: 0x00002000"
  984.  
  985.  
  986. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0061bd32, length: 0x00002000"
  987.  
  988.  
  989. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0061dd00, length: 0x00002000"
  990.  
  991.  
  992. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0061f078, length: 0x00002000"
  993.  
  994.  
  995. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0061f8ee, length: 0x00002000"
  996.  
  997.  
  998. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00621193, length: 0x00002000"
  999.  
  1000.  
  1001. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0062248d, length: 0x00002000"
  1002.  
  1003.  
  1004. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0062775c, length: 0x00004000"
  1005.  
  1006.  
  1007. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0062a696, length: 0x00004000"
  1008.  
  1009.  
  1010. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006336c4, length: 0x00006000"
  1011.  
  1012.  
  1013. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00637a78, length: 0x00002000"
  1014.  
  1015.  
  1016. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006398ac, length: 0x00004000"
  1017.  
  1018.  
  1019. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0063f6d9, length: 0x00002000"
  1020.  
  1021.  
  1022. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00669ca0, length: 0x00002000"
  1023.  
  1024.  
  1025. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0066abf1, length: 0x00002000"
  1026.  
  1027.  
  1028. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0066b822, length: 0x00004000"
  1029.  
  1030.  
  1031. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0067cbf1, length: 0x00002000"
  1032.  
  1033.  
  1034. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0067dba3, length: 0x00002000"
  1035.  
  1036.  
  1037. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0067f4d6, length: 0x00002000"
  1038.  
  1039.  
  1040. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0068031b, length: 0x00004000"
  1041.  
  1042.  
  1043. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00683817, length: 0x00002000"
  1044.  
  1045.  
  1046. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00683caa, length: 0x00004000"
  1047.  
  1048.  
  1049. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006862db, length: 0x00004000"
  1050.  
  1051.  
  1052. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00688562, length: 0x00004000"
  1053.  
  1054.  
  1055. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0068c3d8, length: 0x00002000"
  1056.  
  1057.  
  1058. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0068caad, length: 0x00002000"
  1059.  
  1060.  
  1061. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0068d95e, length: 0x00002000"
  1062.  
  1063.  
  1064. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0068e8cb, length: 0x00006000"
  1065.  
  1066.  
  1067. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x00699396, length: 0x00004000"
  1068.  
  1069.  
  1070. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0069cf2c, length: 0x00004000"
  1071.  
  1072.  
  1073. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006a0526, length: 0x00002000"
  1074.  
  1075.  
  1076. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006a0d2d, length: 0x00004000"
  1077.  
  1078.  
  1079. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006a4d70, length: 0x00006000"
  1080.  
  1081.  
  1082. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006b4a28, length: 0x00002000"
  1083.  
  1084.  
  1085. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006b4a6e, length: 0x00002000"
  1086.  
  1087.  
  1088. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006b4f85, length: 0x00004000"
  1089.  
  1090.  
  1091. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006b8000, length: 0x00008000"
  1092.  
  1093.  
  1094. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006bfa9f, length: 0x00002000"
  1095.  
  1096.  
  1097. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006de03b, length: 0x00002000"
  1098.  
  1099.  
  1100. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006de8b5, length: 0x00004000"
  1101.  
  1102.  
  1103. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e2c97, length: 0x00002000"
  1104.  
  1105.  
  1106. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e2d73, length: 0x00002000"
  1107.  
  1108.  
  1109. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e42ef, length: 0x00002000"
  1110.  
  1111.  
  1112. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e465f, length: 0x00002000"
  1113.  
  1114.  
  1115. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e500a, length: 0x00002000"
  1116.  
  1117.  
  1118. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e506d, length: 0x00002000"
  1119.  
  1120.  
  1121. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e5eb2, length: 0x00002000"
  1122.  
  1123.  
  1124. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e6c55, length: 0x00002000"
  1125.  
  1126.  
  1127. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e753f, length: 0x00002000"
  1128.  
  1129.  
  1130. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e80a1, length: 0x00002000"
  1131.  
  1132.  
  1133. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006e8ffc, length: 0x00004000"
  1134.  
  1135.  
  1136. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006eb97f, length: 0x00002000"
  1137.  
  1138.  
  1139. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006eb9dc, length: 0x00002000"
  1140.  
  1141.  
  1142. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006ebc02, length: 0x00002000"
  1143.  
  1144.  
  1145. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006ebd91, length: 0x00002000"
  1146.  
  1147.  
  1148. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006ebdee, length: 0x00002000"
  1149.  
  1150.  
  1151. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006ebf82, length: 0x00004000"
  1152.  
  1153.  
  1154. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006ee4e8, length: 0x00002000"
  1155.  
  1156.  
  1157. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006eeab4, length: 0x00002000"
  1158.  
  1159.  
  1160. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006f8112, length: 0x00004000"
  1161.  
  1162.  
  1163. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x006fa319, length: 0x00002000"
  1164.  
  1165.  
  1166. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x0070466c, length: 0x000010e8"
  1167.  
  1168.  
  1169. "self_read": "process: BasicBot.exe, pid: 3060, offset: 0x007056f4, length: 0x00000060"
  1170.  
  1171.  
  1172.  
  1173.  
  1174. "Description": "Drops a binary and executes it",
  1175. "Details":
  1176.  
  1177. "binary": "C:\\Users\\user\\AppData\\Roaming\\program2.exe"
  1178.  
  1179.  
  1180. "binary": "C:\\Users\\user\\AppData\\Roaming\\BasicBot.exe"
  1181.  
  1182.  
  1183.  
  1184.  
  1185. "Description": "The binary likely contains encrypted or compressed data.",
  1186. "Details":
  1187.  
  1188. "section": "name: .rdata, entropy: 7.11, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ, raw_size: 0x00003400, virtual_size: 0x000033a5"
  1189.  
  1190.  
  1191. "section": "name: .rsrc, entropy: 8.00, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ, raw_size: 0x008c5400, virtual_size: 0x008c5388"
  1192.  
  1193.  
  1194.  
  1195.  
  1196. "Description": "Attempts to repeatedly call a single API many times in order to delay analysis time",
  1197. "Details":
  1198.  
  1199. "Spam": "Exes_f2ac3bcb1b1168447c9a61d79b223186.exe (1944) called API GetSystemTimeAsFileTime 55664 times"
  1200.  
  1201.  
  1202.  
  1203.  
  1204. "Description": "File has been identified by 24 Antiviruses on VirusTotal as malicious",
  1205. "Details":
  1206.  
  1207. "Bkav": "W32.CsrjshAXAR.Trojan"
  1208.  
  1209.  
  1210. "Qihoo-360": "HEUR/QVM05.1.BA49.Malware.Gen"
  1211.  
  1212.  
  1213. "Cylance": "Unsafe"
  1214.  
  1215.  
  1216. "K7GW": "Riskware ( 0040eff71 )"
  1217.  
  1218.  
  1219. "K7AntiVirus": "Riskware ( 0040eff71 )"
  1220.  
  1221.  
  1222. "APEX": "Malicious"
  1223.  
  1224.  
  1225. "ClamAV": "Win.Malware.Fuerboos-7011952-0"
  1226.  
  1227.  
  1228. "NANO-Antivirus": "Trojan.Win32.HostsChanger.fqynte"
  1229.  
  1230.  
  1231. "Rising": "[email protected] (RDML:b4hgzUYY2Vo9j9M3bTPUmg)"
  1232.  
  1233.  
  1234. "Endgame": "malicious (high confidence)"
  1235.  
  1236.  
  1237. "Invincea": "heuristic"
  1238.  
  1239.  
  1240. "McAfee-GW-Edition": "BehavesLike.Win32.Generic.rc"
  1241.  
  1242.  
  1243. "Trapmine": "malicious.high.ml.score"
  1244.  
  1245.  
  1246. "FireEye": "Generic.mg.f2ac3bcb1b116844"
  1247.  
  1248.  
  1249. "SentinelOne": "DFI - Suspicious PE"
  1250.  
  1251.  
  1252. "Jiangmin": "Exploit.BypassUAC.bii"
  1253.  
  1254.  
  1255. "Webroot": "W32.Trojan.Gen"
  1256.  
  1257.  
  1258. "Antiy-AVL": "Trojan/Win32.Occamy"
  1259.  
  1260.  
  1261. "Microsoft": "Trojan:Win32/Wacatac.B!ml"
  1262.  
  1263.  
  1264. "Acronis": "suspicious"
  1265.  
  1266.  
  1267. "VBA32": "Trojan.Fuerboos"
  1268.  
  1269.  
  1270. "Cybereason": "malicious.c81e8c"
  1271.  
  1272.  
  1273. "Panda": "Trj/Genetic.gen"
  1274.  
  1275.  
  1276. "CrowdStrike": "win/malicious_confidence_90% (D)"
  1277.  
  1278.  
  1279.  
  1280.  
  1281. "Description": "Clamav Hits in Target/Dropped/SuriExtracted",
  1282. "Details":
  1283.  
  1284. "target": "clamav:Win.Malware.Fuerboos-7011952-0, sha256:59fca7bc8f8686386c747a87a7ce0e1a66345bf43d7b14af6d842aca263f7063, type:PE32 executable (console) Intel 80386, for MS Windows"
  1285.  
  1286.  
  1287. "dropped": "clamav:Win.Malware.Fuerboos-7011952-0, sha256:47499b327055e52488a90189db63efc7eb823070d1ec94a3c8fe18dafcbca6e8 , guest_paths:C:\\Users\\user\\AppData\\Roaming\\program2.exe, type:PE32 executable (console) Intel 80386, for MS Windows"
  1288.  
  1289.  
  1290.  
  1291.  
  1292.  
  1293. * Started Service:
  1294.  
  1295. * Mutexes:
  1296.  
  1297. * Modified Files:
  1298. "C:\\Users\\user\\AppData\\Local\\Temp\\64F5.tmp\\6505.tmp\\6506.bat",
  1299. "C:\\Users\\user\\AppData\\Roaming\\program2.exe",
  1300. "C:\\Users\\user\\AppData\\Roaming\\wget.exe",
  1301. "C:\\Users\\user\\AppData\\Roaming\\BasicBot.exe",
  1302. "C:\\Users\\user\\AppData\\Roaming\\",
  1303. "C:\\Users\\user\\AppData\\Local\\Temp\\6737.tmp\\6747.tmp\\6748.bat",
  1304. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\BasicBot.exe.manifest",
  1305. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\VCRUNTIME140.dll",
  1306. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_asyncio.pyd",
  1307. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_bz2.pyd",
  1308. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_contextvars.pyd",
  1309. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_ctypes.pyd",
  1310. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_decimal.pyd",
  1311. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_hashlib.pyd",
  1312. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_lzma.pyd",
  1313. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_multiprocessing.pyd",
  1314. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_overlapped.pyd",
  1315. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_queue.pyd",
  1316. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_socket.pyd",
  1317. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\_ssl.pyd",
  1318. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\aiohttp\\_frozenlist.cp37-win32.pyd",
  1319. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\aiohttp\\_helpers.cp37-win32.pyd",
  1320. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\aiohttp\\_http_parser.cp37-win32.pyd",
  1321. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\aiohttp\\_http_writer.cp37-win32.pyd",
  1322. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\aiohttp\\_websocket.cp37-win32.pyd",
  1323. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-console-l1-1-0.dll",
  1324. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-datetime-l1-1-0.dll",
  1325. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-debug-l1-1-0.dll",
  1326. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-errorhandling-l1-1-0.dll",
  1327. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-file-l1-1-0.dll",
  1328. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-file-l1-2-0.dll",
  1329. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-file-l2-1-0.dll",
  1330. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-handle-l1-1-0.dll",
  1331. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-heap-l1-1-0.dll",
  1332. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-interlocked-l1-1-0.dll",
  1333. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-libraryloader-l1-1-0.dll",
  1334. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-localization-l1-2-0.dll",
  1335. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-memory-l1-1-0.dll",
  1336. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-namedpipe-l1-1-0.dll",
  1337. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-processenvironment-l1-1-0.dll",
  1338. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-processthreads-l1-1-0.dll",
  1339. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-processthreads-l1-1-1.dll",
  1340. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-profile-l1-1-0.dll",
  1341. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-rtlsupport-l1-1-0.dll",
  1342. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-string-l1-1-0.dll",
  1343. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-synch-l1-1-0.dll",
  1344. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-synch-l1-2-0.dll",
  1345. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-sysinfo-l1-1-0.dll",
  1346. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-timezone-l1-1-0.dll",
  1347. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-core-util-l1-1-0.dll",
  1348. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-conio-l1-1-0.dll",
  1349. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-convert-l1-1-0.dll",
  1350. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-environment-l1-1-0.dll",
  1351. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-filesystem-l1-1-0.dll",
  1352. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-heap-l1-1-0.dll",
  1353. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-locale-l1-1-0.dll",
  1354. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-math-l1-1-0.dll",
  1355. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-process-l1-1-0.dll",
  1356. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-runtime-l1-1-0.dll",
  1357. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-stdio-l1-1-0.dll",
  1358. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-string-l1-1-0.dll",
  1359. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-time-l1-1-0.dll",
  1360. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\api-ms-win-crt-utility-l1-1-0.dll",
  1361. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\libcrypto-1_1.dll",
  1362. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\libssl-1_1.dll",
  1363. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\multidict\\_multidict.cp37-win32.pyd",
  1364. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\pyexpat.pyd",
  1365. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\python37.dll",
  1366. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\select.pyd",
  1367. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\ucrtbase.dll",
  1368. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\unicodedata.pyd",
  1369. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\websockets\\speedups.cp37-win32.pyd",
  1370. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\base_library.zip",
  1371. "C:\\Users\\user\\AppData\\Local\\Temp\\_MEI4322\\certifi\\cacert.pem"
  1372.  
  1373.  
  1374. * Deleted Files:
  1375. "C:\\Users\\user\\AppData\\Local\\Temp\\64F5.tmp",
  1376. "C:\\Users\\user\\AppData\\Local\\Temp\\64F5.tmp\\6505.tmp",
  1377. "C:\\Users\\user\\AppData\\Local\\Temp\\64F5.tmp\\6505.tmp\\6506.tmp",
  1378. "C:\\Users\\user\\AppData\\Local\\Temp\\6737.tmp",
  1379. "C:\\Users\\user\\AppData\\Local\\Temp\\6737.tmp\\6747.tmp",
  1380. "C:\\Users\\user\\AppData\\Local\\Temp\\6737.tmp\\6747.tmp\\6748.tmp",
  1381. "C:\\Users\\user\\AppData\\Local\\Temp\\6737.tmp\\6747.tmp\\6749.tmp",
  1382. "C:\\Users\\user\\AppData\\Local\\Temp\\6737.tmp\\6747.tmp\\extd.exe",
  1383. "C:\\Users\\user\\AppData\\Local\\Temp\\6737.tmp\\6747.tmp\\6748.bat",
  1384. "C:\\Users\\user\\AppData\\Local\\Temp\\6737.tmp\\6747.tmp\\"
  1385.  
  1386.  
  1387. * Modified Registry Keys:
  1388.  
  1389. * Deleted Registry Keys:
  1390.  
  1391. * DNS Communications:
  1392.  
  1393. "type": "A",
  1394. "request": "discordapp.com",
  1395. "answers":
  1396.  
  1397. "data": "162.159.135.233",
  1398. "type": "A"
  1399.  
  1400.  
  1401. "data": "162.159.134.233",
  1402. "type": "A"
  1403.  
  1404.  
  1405. "data": "162.159.129.233",
  1406. "type": "A"
  1407.  
  1408.  
  1409. "data": "162.159.130.233",
  1410. "type": "A"
  1411.  
  1412.  
  1413. "data": "162.159.133.233",
  1414. "type": "A"
  1415.  
  1416.  
  1417.  
  1418.  
  1419. "type": "A",
  1420. "request": "gateway.discord.gg",
  1421. "answers":
  1422.  
  1423. "data": "162.159.135.234",
  1424. "type": "A"
  1425.  
  1426.  
  1427. "data": "162.159.133.234",
  1428. "type": "A"
  1429.  
  1430.  
  1431. "data": "162.159.130.234",
  1432. "type": "A"
  1433.  
  1434.  
  1435. "data": "162.159.136.234",
  1436. "type": "A"
  1437.  
  1438.  
  1439. "data": "162.159.134.234",
  1440. "type": "A"
  1441.  
  1442.  
  1443.  
  1444.  
  1445.  
  1446. * Domains:
  1447.  
  1448. "ip": "162.159.130.233",
  1449. "domain": "discordapp.com"
  1450.  
  1451.  
  1452. "ip": "162.159.135.234",
  1453. "domain": "gateway.discord.gg"
  1454.  
  1455.  
  1456.  
  1457. * Network Communication - ICMP:
  1458.  
  1459. * Network Communication - HTTP:
  1460.  
  1461. * Network Communication - SMTP:
  1462.  
  1463. * Network Communication - Hosts:
  1464.  
  1465. * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!